Expose SBOM controlled source evidence
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Build and Publish Container Image / build-and-push (push) Successful in 21s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a028de-e2c8-7732-8521-46a7fc5db82f
This commit is contained in:
tegwick 2026-08-23 01:39:38 +02:00
parent c1d5e4a9dd
commit 34867d784f
3 changed files with 61 additions and 10 deletions

View file

@ -640,6 +640,12 @@ def test_deterministic_report_names_selected_repos() -> None:
"sbom_age_days": 9999,
"has_sbom": False,
"checkout_available": True,
"source_ref": {
"kind": "forgejo-archive-v1",
"repository": "coulomb/never-scanned",
"revision": "a" * 40,
"archive_url": "must-not-enter-progress-evidence",
},
},
{
"repo_slug": "no-checkout",
@ -647,6 +653,11 @@ def test_deterministic_report_names_selected_repos() -> None:
"sbom_age_days": 112,
"has_sbom": True,
"checkout_available": False,
"source_ref": {
"kind": "forgejo-archive-v1",
"repository": "coulomb/no-checkout",
"revision": "not-a-full-sha",
},
},
],
"selected_count": 2,
@ -663,6 +674,7 @@ def test_deterministic_report_names_selected_repos() -> None:
report = result.report
assert report["deterministic"] is True
assert report["never_count"] == 93
assert report["controlled_source_count"] == 1
assert [r["repo_slug"] for r in report["selected_repos"]] == [
"never-scanned",
"no-checkout",
@ -670,6 +682,12 @@ def test_deterministic_report_names_selected_repos() -> None:
assert "93 never scanned of 111 repos" in report["summary"]
assert report["updated_repos"] == []
assert report["skipped_repos"] == []
assert report["selected_repos"][0]["source_ref"] == {
"kind": "forgejo-archive-v1",
"repository": "coulomb/never-scanned",
"revision": "a" * 40,
}
assert "source_ref" not in report["selected_repos"][1]
def test_deterministic_report_carries_t02_ingest_outcomes() -> None: